General

  • Target

    4fe42c199a03aab3d3a6a2faeef64bf0_NeikiAnalytics.exe

  • Size

    2.6MB

  • Sample

    240529-ltf3qabc88

  • MD5

    4fe42c199a03aab3d3a6a2faeef64bf0

  • SHA1

    6c618d8c4bdc3ae49cfa598d45d3a70216430af8

  • SHA256

    c70310b0c972fe29e7915850179b2504162c3027534e0e6dffe868465a68dfff

  • SHA512

    5ec3263d6707c255a8ac88bdb400af6bd8da9c33a987d0ecad42e6e211f5fd27dfcc3735fbd74d2290061c9f05d57a5e9ff9872f3280623fc6acc39d34113f6a

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB9B/bS:sxX7QnxrloE5dpUpyb

Malware Config

Targets

    • Target

      4fe42c199a03aab3d3a6a2faeef64bf0_NeikiAnalytics.exe

    • Size

      2.6MB

    • MD5

      4fe42c199a03aab3d3a6a2faeef64bf0

    • SHA1

      6c618d8c4bdc3ae49cfa598d45d3a70216430af8

    • SHA256

      c70310b0c972fe29e7915850179b2504162c3027534e0e6dffe868465a68dfff

    • SHA512

      5ec3263d6707c255a8ac88bdb400af6bd8da9c33a987d0ecad42e6e211f5fd27dfcc3735fbd74d2290061c9f05d57a5e9ff9872f3280623fc6acc39d34113f6a

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB9B/bS:sxX7QnxrloE5dpUpyb

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks